Schneider Electric U.motion Builder Information Disclosure Vulnerability (CNVD-2018-11390)

U.motion Builder is a builder product from Schneider Electric France. An information disclosure vulnerability exists in the Schneider Electric U.motion Builder that stems from improperly filtered validation of context parameter inputs in HTTP GET requests, which can be exploited by an attacker to...

Delta Electronics PMSoft

1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION : Low skill level to exploit. Vendor : Delta Electronics Equipment : PMSoft Vulnerabilities : Multiple Stack-Based Buffer Overflow vulnerabilities 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause the application to crash;...

Schneider Electric U.motion Builder Directory Traversal Vulnerability

U.motion Builder is a generator product from Schneider Electric France. A directory traversal vulnerability exists in Schneider Electric U.motion Builder when handling the 's' parameter of an applet. The vulnerability exists in the runscript.php applet and can be exploited to obtain sensitive...

Schneider Electric U.motion Builder sendmail email_attachment parameter information disclosure vulnerability

U.motion Builder is a builder product from Schneider Electric France. An information disclosure vulnerability exists in the handling of the Schneider Electric U.motion Builder sendmail emailattachment parameter in sendmail.php, which can be exploited by an attacker to select arbitrary files to be...

OMRON CX-One CX-Motion wcscpy Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of M...

DLINK DCS-5020L - Remote Code Execution (PoC)

DLINK DCS-5020L - Remote Code Execution PoC “The DCS-5020L Wireless N Day & Night Pan/Tilt Cloud Camera is a day/night network camera that easily connects to your existing home network for remote viewing on a range of mobile devices. It features pan, tilt and digital zoom function to allow you to...

CVE-2017-13186

A vulnerability in the Android media framework libavc related to incorrect use of mmco parameters. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65735716...

Ubiquiti UniFi Video 3.7.3 - Local Privilege Escalation

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: Ubiquiti UniFi Video Windows Vendor URL: https://www.ubnt.com Type: Improper Handling of Insufficient Permissions or Privileges CWE-280 Date found: 2016-05-24 Date published: 2017-12-20 CVSS...

Ubiquiti UniFi Video 3.7.3 - Local Privilege Escalation

Ubiquiti UniFi Video 3.7.3 - Local Privilege Escalation RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: Ubiquiti UniFi Video Windows Vendor URL: https://www.ubnt.com Type: Improper Handling of Insufficient Permissions or Privileges CWE-28...

Applying Lean to Information Risk Management

Lean Manufacturing brings significant benefits to industry, including cost reduction, quality improvement, reduced cycle time, and greater customer satisfaction See “The Machine that Changed the World”, Womak, J., Jones, D., and Roos, D., Free, Press, 1990 for the groundbreaking analysis of...

The vulnerability of the Data-in-Motion process of the Cisco IOx software platform allows a malicious actor to execute arbitrary code with root privileges.

The vulnerability of the Data-in-Motion process of the Cisco IOx software platform arises from operations that occur outside the buffer boundaries on the stack inadequate checking of buffer boundaries during the registration of the DMo process. Exploiting this vulnerability allows a malicious...

Memory corruption vulnerability exists in Xunlei Video (CNVD-2017-34201)

Xunlei Video is a media player from Xunlei. A memory corruption vulnerability exists in the mp4splitter module of Xunlei Video when parsing certain MOV files, which can be exploited by an attacker to cause a denial of service attack or arbitrary code execution...

CVE-2017-9959

A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system accepts reboot in session from unauthenticated users, supporting a denial of service condition...

The vulnerability of the mv_read_header function in the multimedia library Ffmpeg (libavformat/mvdec.c) allows a attacker to trigger memory consumption and service failure.

The vulnerability of the mvreadheader function in the FFmpeg multimedia library libavformat/mvdec.c is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to trigger memory consumption and service failures by using a specially created MV format file...

Struts2 new flaws vulnerability bug（S2-052 presents the use case, and face the vulnerability flaws of the enterprise-the race against time-vulnerability warning-the black bar safety net

Prior to the black bar safety net it S2-052）vulnerabilities done in a special thematic report, I believe we also have understand! Recently from the Cisco Talos experimental study of the analysis chamber and NVISO laboratory for the research staff also found that there was an attacker of real use ...

Ffmpeg 'mv_read_header()' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'mvreadheader' function in the libavformat/mvdec.c file in FFmpeg version 3.3.3, which stems from the program's failure to adequately detect EOF End o...

The vulnerability of the autonomous configuration tool for the visualization and control system “U.motion Builder” arises from the use of a default password, allowing attackers to bypass the authentication process.

The vulnerability of the autonomous configuration tool for the U.motion Builder visualization and control system exists due to the use of a default password. Exploiting this vulnerability allows an attacker to bypass the authentication process remotely...

The vulnerability of the autonomous configuration tool for the visualization and control system “U.motion Builder” arises from deficiencies in protecting the SQL query structure, allowing attackers to execute arbitrary SQL commands.

The vulnerability of the autonomous configuration tool for the visualization and control system “U.motion Builder” stems from deficiencies in measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

ladies-in-motion.de XSS vulnerability

Vulnerable URL: http://ladies-in-motion.de/SearchEx.aspx?searchbox=1=%3C%2Fscript%3E%3Cimg%20src%3Dx%20onerror%3Dprompt%2FXSSPOSED%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-14510)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...